Skip to content

fix: handle missing release tags safely - #182

Merged
mldangelo-oai merged 2 commits into
mainfrom
mdangelo/codex/fix-release-tag-lookup-20260731
Jul 31, 2026
Merged

fix: handle missing release tags safely#182
mldangelo-oai merged 2 commits into
mainfrom
mdangelo/codex/fix-release-tag-lookup-20260731

Conversation

@mldangelo-oai

Copy link
Copy Markdown
Collaborator

Summary

  • Treat GitHub's JSON 404 response for a missing release tag as absent so the release cutter can create the exact merged tag.
  • Fail closed on permission failures, unavailable responses, and other tag lookup errors instead of attempting publication.
  • Add regression coverage for missing tags, forbidden lookups, and missing API responses while retaining existing annotated/lightweight tag checks.

The 0.1.5 release exposed this bug in node-release-cut: gh api writes its 404 error body to stdout, so the previous || true path mistakenly treated the JSON error as an existing Git ref.

Validation

  • bun test --timeout 30000 ./tests-ts709 passed, 5 existing skips.
  • tsc --noEmit -p sdk/typescript/tsconfig.json.
  • prettier --check .github/workflows/node-release-cut.yml sdk/typescript/tests-ts/release-automation.test.ts.
  • git diff --check.

@github-actions github-actions Bot added the bug Something isn't working label Jul 31, 2026
@mldangelo-oai

Copy link
Copy Markdown
Collaborator Author

@codex review Please review exact head 4bf379c, focusing on real GitHub CLI 404 responses for missing release tags, fail-closed handling of 403/transport errors, exact-commit tag validation, and release automation regression coverage.

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 4bf379c56e

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

Comment thread .github/workflows/node-release-cut.yml Outdated
@chatgpt-codex-connector

Copy link
Copy Markdown

Security review completed. No security issues were found in this pull request.

Reviewed commit: 4bf379c56e

View security finding report

Only the user who started this review can view the report in Codex.

ℹ️ About Codex security reviews in GitHub

This is an experimental Codex feature. Security reviews are triggered when:

  • You comment "@codex security review"
  • A regular code review gets triggered (for example, "@codex review" or when a PR is opened), and you’re opted in so security review runs alongside code review

Once complete, Codex will leave suggestions, or a comment if no findings are found.

@mldangelo-oai

Copy link
Copy Markdown
Collaborator Author

@codex review Please re-review the updated exact head 7e84eca after your P1 finding. Tag lookup now reads the unfiltered HTTP response and status before parsing JSON; please verify missing tags are created while 403s, malformed 404s, transport failures, and retargeted tags still fail closed.

@chatgpt-codex-connector

Copy link
Copy Markdown

Codex Review: Didn't find any major issues. Keep it up!

Reviewed commit: 7e84eca99f

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

@chatgpt-codex-connector

Copy link
Copy Markdown

Security review completed. No security issues were found in this pull request.

Reviewed commit: 7e84eca99f

View security finding report

Only the user who started this review can view the report in Codex.

ℹ️ About Codex security reviews in GitHub

This is an experimental Codex feature. Security reviews are triggered when:

  • You comment "@codex security review"
  • A regular code review gets triggered (for example, "@codex review" or when a PR is opened), and you’re opted in so security review runs alongside code review

Once complete, Codex will leave suggestions, or a comment if no findings are found.

@mldangelo-oai
mldangelo-oai merged commit 5625adc into main Jul 31, 2026
21 of 22 checks passed
@mldangelo-oai
mldangelo-oai deleted the mdangelo/codex/fix-release-tag-lookup-20260731 branch July 31, 2026 17:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

bug Something isn't working

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants